IBM Rational RequisitePro 7.10 - ReqWeb Help Feature ReqWebHelpadvancedworkingSet.jsp?Operation Cross-Site Scripting

IBM Rational RequisitePro 7.10 - ReqWeb Help Feature ReqWebHelpadvancedworkingSet.jsp?Operation Cross-Site Scripting source: https://www.securityfocus.com/bid/36721/info IBM Rational RequisitePro is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize...

Eclipse BIRT 2.2.1 - 'run?__report' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36674/info Eclipse BIRT Business Intelligence and Reporting Tools is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...

AdaptBB 1.0 - 'q' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42930/info AdaptBB is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Zainu 1.0 - searchSongKeyword Cross-Site Scripting

Zainu 1.0 - searchSongKeyword Cross-Site Scripting source: https://www.securityfocus.com/bid/36701/info Zainu is prone to a cross-site scripting vulnerability in the Contact module because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to...

Dream Poll 3.1 - index.php Cross-Site Scripting SQL Injection

Dream Poll 3.1 - index.php Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/36663/info Dream Poll is prone to a cross-site scripting vulnerability and multiple SQL-injection vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based...

X-Cart Email Subscription - 'email' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36601/info X-Cart is prone to a cross-site scripting vulnerability in the email subscription component because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

AfterLogic WebMail Pro 4.7.10 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36605/info AfterLogic WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

e107 0.7.x - CAPTCHA Security Bypass Cross-Site Scripting

e107 0.7.x - CAPTCHA Security Bypass Cross-Site Scripting source: https://www.securityfocus.com/bid/36532/info e107 is prone to a security-bypass vulnerability and multiple cross-site scripting vulnerabilities. Successfully exploiting the security-bypass issue will allow an attacker to bypass the...

Activedition - activeditionaelogin.asp Multiple Cross-Site Scripting Vulnerabilities

Activedition - activeditionaelogin.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/42164/info Activedition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage thes...

Activedition - '/activedition/aelogin.asp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/42164/info Activedition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in t...

IBM Lotus Connections 2.0.1 - 'simpleSearch.do' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36513/info IBM Lotus Connections is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Juniper Junos 8.59.0 J-Web Interface - diagnose Multiple Cross-Site Scripting Vulnerabilities

Juniper Junos 8.59.0 J-Web Interface - diagnose Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize...

Vastal I-Tech DVD Zone - view_mag.php SQL Injection

Vastal I-Tech DVD Zone - viewmag.php SQL Injection source: https://www.securityfocus.com/bid/36487/info DVD Zone is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...

Juniper Junos 8.5/9.0 J-Web Interface - '/diagnose' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to J-Web Juniper Web Management. Attacker-supplied HTML or JavaScript code could ru...

Avaya Intuity Audix LX R1.1 - Multiple Remote Vulnerabilities

Avaya Intuity Audix LX R1.1 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/36450/info Avaya Intuity Audix LX is prone to multiple remote vulnerabilities, including: 1. Multiple remote command-execution vulnerabilities 2. A cross-site request-forgery vulnerability 3. A...

PaoLink 1.0 - scrivi.php Cross-Site Scripting

PaoLink 1.0 - scrivi.php Cross-Site Scripting source: https://www.securityfocus.com/bid/42420/info PaoLink is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browse...

Mega File Hosting Script 1.2 - 'emaillinks.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36413/info Mega File Hosting Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

RSSMediaScript - index.php Cross-Site Scripting

RSSMediaScript - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/42421/info RSSMediaScript is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...

RSSMediaScript - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42421/info RSSMediaScript is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

Apache Tomcat 3.2 - 404 Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/37149/info Apache Tomcat is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...